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Amendments to the Claims: 

This listing of claims replaces all prior versions, and listings, of claims in the application: 

Listing of Claims: 
1-12. (Cancelled) 

13. (Currently Amended) A method for preventing illeaitmate use of an 
Intemet Pr otocol (IP) address bv a subscriber device in an IP network, the network 
including a switch node[[,]] and at least one DHCP server^ and at l ooot ono said subscriber 
being assooiatod with device in communication with t he switch node, the method including 
the steps of: 

creating a list of trusted ones of the DHCP servers in said switch node : 

transmitting by the subscriber device.a DHCP request message for an IP address; 

receiving a reply message[[,]] ]] bv said switch node which cames an assigned 
subscriber IP address; 

analysing the reply message bv said switch node t o be a DHCP message and 
having a source address from one of the tmsted DHCP servers; 

updating a filter dynamically in the switch node, the filter storing an identification of 
the subscriber device and the assigned subscriber IP address; 

transmitting a frame from the subscriber device using a source IP address; 

comparing in the filter said source IP address with the stored subscriber IP address; 

and. 

discarding said frame when said source IP address differs from the stored subscriber 
IP address. 

14. (Cun^ntly Amended) The method in an I P notwor l t according to 
claim 13, further comprising the step of storing in the filter a subscriber MAC address, a 
subscriber physical port number, a subscriber virtual LAN identity and a lease time 
Interval for the assigned subscriber IP address. 
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15. (Currently Amended) The method in an IP network according to 
claim 13, wherein the subscriber IP address is statically assigned and handled by the 
DHCP servers. 

16. (Currently Amended) The method In an IP network according to 
claim 14, the method including deleting the subscriber identification and the 
corresponding assigned subscriber IP address from the filter when the lease time 
interval Is out. 

17. (Cun-ently Amended) The method In an IP network according to 
claim 13, the method further comprising the steps of: 

counting a number of attempts (n) from the subscriber to use an illegitimate IP 
address: 

comparing the number (n) of the attempts with a threshold number (N); 

sending a waming signal when the number of attempts exceeds a threshold criteria. 

18. (Cun-ently Amended) A dovioo switch node in an Intemet Protocol 
(IP) network adapted to prevent illeaitmate use of an IP address bv a subscriber device , 
the dovico switch node including: 

at least one port for communication with a subscriber device : 

an uplink port for communication with DHCP servers in the network; and^ 

a filter device having a list of tnjsted ones of the DHCP servers, the filter device 

being associated with the ports; wherein the switch node is operative to : 

th e- d e v i c e is op e rat i ve to receive a subscriber IP address request message on th e 

subscriber port from a subscriber device , analyse it to be a DHCP request messaoe and 

transmit It on the uplink port; 

th e dovico is oporativo to receive a reply message on the uplink port, analyse it to be 

a DHCP reB|y_message and to have having a source IP address from one of the tmsted 

DHCP servers on the list; 
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tho dovioo is oporotivo to dynamically update the filter with an identification of the 
subscriber device and a corresponding assigned subscriber IP address contained in the 
DHCP reply message; 

t he d e v i c e i s op o r a tiv o to receive a frame with a source IP address on tho cubccribor 
eert from a subscriber device : 

tho dovioo is oporat i vo to compare in the filter said source IP address with the stored 
subscriber IP address for the subscriber device : and^ 

tho dovioo is oporativo to discard said frame when said source IP address differs 
from the stored subscriber IP address. 



19. (Currently Amended) The dovio o switch node in an IP network 
according to claim 18, wherein t he devioo beiflq -switch node is f urther operative to store 
in the filter a subscriber MAC address, a subscriber physical port number, a subscriber 
virtual l-AN identity and a lease time interval for the assigned subscriber IP address. 

20. {Cun-entiy Amended) The dovioo switch node in an IP notwori( 
according to claim 18, wherein the subscriber IP address comprises a statically assigned 
address which is handled by the DHCP servers. 

21. (Currently Amended) The dovioo switch node i n an IP notwori< 
according to claim 19, wherein t he dovio o being -switch node is f urther operative to delete 
the subscriber Identification and the corresponding assigned subscriber IP address from 
the filter when the lease time interval is-eut expires . 

22. (Currently Amended) The dov i oo switch node in an IP network 
according to claim 18, wherein t he filter having comprises a counter operative to count a 
number (n) of discarded frames on the subscriber port, to compare the number (n) of the 
discarded frames with a threshold number (N)^ and to send a waming signal when the 
number of discarded frames exceeds a threshold criterion. 
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